74 matches found
Security update for rmt-server (important)
openSUSE Security Update: Security update for rmt-server Announcement ID: openSUSE-SU-2019:1824-1 Rating: important References: 1128858 1129271 1129392 1132160 1132690 1134190 1134428 1135222 1136020 1136081 1138316 1140492 Cross-References: CVE-2019-11068 CVE-2019-5419 Affected Products: openSUS...
SUSE-SU-2019:0740-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15)
This update for the Linux Kernel 4.12.14-253 fixes several issues. The following security issues were fixed: - CVE-2019-9213: Expanddownwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP...
SUSE-SU-2018:4189-1 Security update for bluez
This update for bluez fixes the following issues: Security issues fixed: - CVE-2016-9800: Fixed a buffer overflow in pincodereplydump function bsc1013721 - CVE-2016-9801: Fixed a buffer overflow in setextctrl function bsc1013732...
SUSE-SU-2018:2339-2 Security update for samba
This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally bsc1081741. - CVE-2018-10858: smbcurlencode helper function is a subject to buffer overflow bsc1103411...
SUSE-SU-2018:3095-1 Security update for ImageMagick
This update for ImageMagick fixes the following security issues: - CVE-2017-11532: Prevent a memory leak vulnerability in the WriteMPCImage function in coders/mpc.c via a crafted file allowing for DoS bsc1050129 - CVE-2018-16750: Prevent memory leak in the formatIPTCfromBuffer function bsc1108283...
SUSE-SU-2018:2275-1 Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-10012: Fix pre-auth compression checks that could be optimized away bsc1016370. - CVE-2016-10708: Fix remote denial of service NULL pointer dereference and daemon crash via an out-of-sequence NEWKEYSmessage...
SUSE-SU-2017:2312-1 Security update for curl
This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service bsc1051644 - CVE-2017-7407: ourWriteOut function problem could lead to a heap buffer over-read bsc1032309 - CVE-2016-9586: libcurl printf issue could lead ...
Fileless UAC Bypass Uses Windows Backup and Restore Utility
One nugget buried in a recent Vault 7 dump was a bypass of User Account Controls in Windows 7 that allows applications to execute code without triggering the familiar prompt to the user that something may be afoot. Microsoft has not, in the past, considered UAC bypasses a security boundary that...
SUSE-SU-2016:3297-1 Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2016-9809: Malicious mkv/h264 file could cause an off by one out of bounds read and lead to crash bsc1013659 - CVE-2016-9812: Malicious mpeg file could cause invalid a null pointer access and lead to crash bsc1013678 -...
SUSE-SU-2016:3288-1 Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: CVE-2016-9807: flic decoder invalid read could lead to crash bsc1013655 CVE-2016-9634: flic out-of-bounds write could lead to code execution bsc1012102 CVE-2016-9635: flic out-of-bounds write could lead to code execution bsc101210...
openSUSE Security Update : ImageMagick (openSUSE-2016-883)
ImageMagick was updated to fix 66 security issues. These security issues were fixed : - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...
13 December 2001 Cumulative Patch for IE
---------------------------------------------------------------------- Title: 13 December 2001 Cumulative Patch for IE Date: 13 December 2001 Software: Internet Explorer Impact: Run Code of an Attacker's Choice Max Risk: Critical Bulletin: MS01-058 Microsoft encourages customers to review the...
